On 07/13/2015 11:36 AM, Sam Hartman wrote:
It's one more hurdle an attacker has to leap. You are right that it's not a huge win, but it seems to do more to reduce than increase the attack surface.I have never been convinced that DNSsec validation of A or AAAA records has value. I understand I am a heretic in the security community for saying that, but there it is.